Threats Tagged 'cve-2024-9407'
View all threats tagged with 'cve-2024-9407'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2024-9407'
Click on any threat for detailed analysis and mitigation recommendations
Red Hat Security Advisory: OpenShift Container Platform 4.16.24 security updateCVE-2024-9341 0 Red Hat OpenShift Container Platform 4. 16. 24 includes security updates addressing three vulnerabilities: a FIPS crypto-policy directory mounting issue in the containers/common Go library (CVE-2024-9341), improper input validation in the bind-propagation option of the Dockerfile RUN --mount instruction (CVE-2024-9407), and an infinite loop in protojson. Unmarshal when unmarshaling certain invalid JSON inputs (CVE-2024-24786). These issues affect container image components such as Podman, Buildah, and cri-o. The update is rated with moderate security impact by Red Hat Product Security. Users of OpenShift Container Platform 4. 16 are advised to upgrade to the updated packages and images via the appropriate release channels using the OpenShift CLI or web console. Join the discussion | GCVE Database | 11/26/2024, 18:45:35 UTC Added: 05/26/2026, 20:57:59 UTC |
CVE-2024-9407: Improper Input ValidationCVE-2024-9407 0 A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly validate the input passed to this option, allowing users to pass arbitrary parameters to the mount instruction. This issue can be exploited to mount sensitive directories from the host into a container during the build process and, in some cases, modify the contents of those mounted files. Even if SELinux is used, this vulnerability can bypass its protection by allowing the source directory to be relabeled to give the container access to host files. Join the discussion | CVE Database V5 | 10/01/2024, 20:13:29 UTC Added: 06/09/2025, 11:31:25 UTC |
Showing 1 to 2 of 2 results